Bitcoin Forum
September 25, 2018, 08:31:25 AM *
News: ♦♦ New info! Bitcoin Core users absolutely must upgrade to previously-announced 0.16.3 [Torrent]. All Bitcoin users should temporarily trust confirmations slightly less. More info.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Data Recovery - Tails/Luks - help will pay 1BTC!  (Read 857 times)
0009JG
Newbie
*
Offline Offline

Activity: 8
Merit: 0


View Profile
June 27, 2015, 12:37:07 AM
 #1

Hi there, I may have been registered on here before but I cant actually remember so for now we will go with me being a newbie! Hi all Smiley

Firstly mods, I do hope this is allowed and I also hope it is in a suitable section.

Long story short, had a tails USB drive, all was well. One day I plugged it in and the option to enable persistence in the greeter was not there.
It was not there after many attempts. It no longer shows as "encrypted" and it shows as "unknown", same story if you look at it from another tails.

I have explained it in detail here:

http://www.reddit.com/r/tails/comments/3abl7q/tails_14_persistence_vanished_help/

http://www.reddit.com/r/datarecovery/comments/3b2x3n/luks_lost_header/

As mentioned in the links, if anyone can get into it I can give at least 1BTC to them.

I know I should have had it backed up! This has been killing me all week. I look forward to the replies.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1537864285
Hero Member
*
Offline Offline

Posts: 1537864285

View Profile Personal Message (Offline)

Ignore
1537864285
Reply with quote  #2

1537864285
Report to moderator
elbandi
Hero Member
*****
Offline Offline

Activity: 515
Merit: 503


View Profile
June 27, 2015, 12:42:16 AM
 #2

create a dd image from the usb driver, upload it to somewhere (dropbox, googledrive)
0009JG
Newbie
*
Offline Offline

Activity: 8
Merit: 0


View Profile
June 27, 2015, 12:47:02 AM
 #3

Thank you. I have an image of the drive here but not uploaded any where yet. Do you think that is safe to do so?
I understand it is encrypted but even so?
fbueller
Sr. Member
****
Offline Offline

Activity: 412
Merit: 250


View Profile
June 27, 2015, 12:58:35 AM
 #4

Ubuntu is configured to detect these volumes, normally it'll ask you for the password if you pop it in (not in Tails).  Obviously if there is damage, you'll have to do more. Hopefully it's just a case of Tails moving the option somewhere..

For starters, have a look at the Ubuntu manual for LUKS. https://help.ubuntu.com/community/EncryptedFilesystemsOnRemovableStorage It shows you how to create these volumes, and mount them by hand.

Insert your usb and do `dmesg | tail -n 20` to quickly learn the device.
`sudo fdisk -l /dev/<device>` to see the partition layout (lowercase L)
`sudo cryptsetup luksOpen /dev/<device> map_my_usb`
Should prompt for your password.

`sudo mkdir /media/my_usb && mount /dev/mapper/map/ /media/my_usb`

If this worked, you're in! If not, you have bigger problems.

https://www.lisenet.com/2013/luks-add-keys-backup-and-restore-volume-header/ Covers your LUKS header, which if damaged, means cryptsetup doesn't have the metadata required to derive the key..

I managed to get access with a huge amount of effort, but this article appeared to go into some thing you can do to fix corruption: http://blog.miketoscano.com/?p=72

Good luck!

Bitwasp Developer.
0009JG
Newbie
*
Offline Offline

Activity: 8
Merit: 0


View Profile
June 27, 2015, 11:52:41 PM
 #5

I got as far as fdisk -l

The tails USB shows up as dev/sdc1
IT says "Warning GPT (GUID Partition table) detected on "dev/sdc'! The util fdisk doesnt support GPT. Use GNU parted.

In gnome, the usb shows the first part as a tails OS and I can mount that, the second part as 'dev/sdc2' and it says "TailsData unknown" which is more than it says in tails. No option to mount or enter password.

I am now lost.
TheGrimm
Full Member
***
Offline Offline

Activity: 238
Merit: 100

★YoBit.Net★ 350+ Coins Exchange & Dice


View Profile
June 28, 2015, 12:47:23 AM
 #6


Run:
blkid /dev/sdc2

Edit:
/etc/crypttab

Find:
sdc2_crypt UUID=  .......

Are they the same?

0009JG
Newbie
*
Offline Offline

Activity: 8
Merit: 0


View Profile
June 28, 2015, 11:20:19 AM
 #7


Run:
blkid /dev/sdc2

Edit:
/etc/crypttab

Find:
sdc2_crypt UUID=  .......

Are they the same?


Thanks. On ubuntu or on tails itself. I am assuming ubuntu?
Either way I will report back later.
0009JG
Newbie
*
Offline Offline

Activity: 8
Merit: 0


View Profile
June 30, 2015, 12:41:19 PM
 #8

Blkid wont work.

Im being told it is not a LUKS device?
elbandi
Hero Member
*****
Offline Offline

Activity: 515
Merit: 503


View Profile
June 30, 2015, 09:55:23 PM
 #9

Thank you. I have an image of the drive here but not uploaded any where yet. Do you think that is safe to do so?
I understand it is encrypted but even so?
Ah, i see, you have btc on it. (i thought just you have important mail/data/etc on usb).

Basectly, it's encrypted, so you can share the encrypted data (same situation, if someone stole your usb)...
0009JG
Newbie
*
Offline Offline

Activity: 8
Merit: 0


View Profile
July 01, 2015, 12:02:39 AM
 #10

Thank you. I have an image of the drive here but not uploaded any where yet. Do you think that is safe to do so?
I understand it is encrypted but even so?
Ah, i see, you have btc on it. (i thought just you have important mail/data/etc on usb).

Basectly, it's encrypted, so you can share the encrypted data (same situation, if someone stole your usb)...


Yeah man, two wallets. Had the seed of one backed up, not the other. It is on there on a text file somewhere!
That is all I need. I have recovered the other shit, well most of it from different places and can live without the rest but
them damn coins Sad
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!